The src should point to the xdomain.js file you just uploaded and master should be set to the server where your viewer is located. This script sends the actual requests for the document so that they come from the same domain.

Back in your viewer code, find the place where you call new PDFTron.WebViewer({...}). Add the option xdomainProxyUrl to the constructor so that it looks something like this: